{
  "ok": true,
  "app_id": "com.languagedrops.drops.learn.learning.speak.language.arabic.words",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "d099bbbc-9361-4b8b-b81b-03651b5506e3",
    "version": "39.18",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 94,
    "scanned_at": "2026-09-03T00:28:13.939Z"
  },
  "to": {
    "scan_id": "13e35604-ba44-4e6f-bee4-29ff54423b3b",
    "version": "39.18",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 23895.276,
        "harvest": 8612.469999999998,
        "detectors": 13436.943000000061
      },
      "bytes_total": 177736781,
      "bytes_scanned": 177736781,
      "bytes_skipped": 0,
      "files_processed": 3428,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "97fddd543efcecacc458ee81c69df998534b24afe1d76d4e3585c01b313eabe5"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "bc7df86d049ebbd51547c57dd8cf2c1e24907cec37e79ec27924b2e82245de2b"
        },
        {
          "name": "config.en.apk",
          "sha256": "193a7e9018a1d188839137609e9388257a425c385f5fbea32d5f5a917ef566c9"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "56712d5cb9355a2ecead3b80c63c0d36ad5891fd2cdfe9b2d679c23b790af78c"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "D",
    "score": 40,
    "scanned_at": "2026-10-06T20:50:51.519Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "135ae9a8ed108d60b247d0132f67aef148ca1198c427fce16a1f49ccd184d148",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "470a881be5eae9a017750bba32d8341192b9cea1ece75c84262b512442fa91e2",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "affc972b4cd834cbe50ad98d8f445578234b277f530b18932dc93e2313d1b927",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "74d50cc4f4d8fdff6d1008a52ee5777e028f55a6f6fdd83b43a8c606b388a54f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "df3c0b7059f0059ae1674309187f0610bf5b56c65a312479f0a89188ae15982f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "299377ec38052e22a81e9d449de44be59505ed953b36c811d656ffb74d4c24e0",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ba87857c58228e4f2d6f0c0b70d64c6301c497a24bcdefc14cd3a577f59f55b8",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "06dcd7402494d27a87ac74230438492dac0102fed750a196c4d79500aabbf3e8",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "1cfaa0ffb13ae47bb1dee5727a75ef6b4be57d3b3cd70c01353095a8b0427655",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "ea120a459089ef006bf099d5ce2f514ae06a18f7920afe9116735bcec4a15639",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "2be2ef8387d242d899dce3eefed726c6c0344a6657d25f9b9bde633e04813553",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "5d11dd99e24366e2b65daf06b2581c7fd4db3e89063f58474635f4a897d561b5",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6d3265bf2f5e1221c48d93b1c227e7ca5f10732ade5bc66fdfaf8eac1681c80b",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "e75700d3bba1245ba04cb237c27537a6222714b3040c0dde33fb624a331cf58f",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "fa8ad1e8adc7efe099c7bc2753e2251a8451a11ea592b66ec5effde0adfd7c34",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "03332b0936d8bcdd11ec6e6731a588bf373bc29a3d60b9c4179dcb92f68d5276",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "111abbedee9811a32736e84ee085d3f5a98e1a2acbc72648f0e2be47cdf62e1f",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "2f1b2e71d7593be81e1dfec0bd7e74db076ec12bfd2282feac94fa46037b0df2",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "b036fa46b14bfac844de5a6c9fac1d7e831e4036e733a06df9de7a43ca782e37",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "8c6cd25cc74195c2d7f49c63504b4c7a8bbf79e0413eaf5cabb73c5759b97367",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "235a4e576184b9c8a365616036ea6d059582916088a598a3ac690577d0ba174d",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "low",
        "title": "Application data is backup-enabled",
        "fingerprint": "d3416964a26a93aeec0126ea1bb43b17c4aba66f0c76c2dc8ebd02d06ec4ef49",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 0,
      "low": 12
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 9
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}